Unverified50% confidenceFactExact time
Commit SHA 基于 SHA-1 的内容寻址特性，具备密码学层面的完整性保证，即便标签被恶意篡改，锁定 SHA 的工作流也不会受影响，Git 正逐步向 SHA-256 迁移
1
Sources
50%
Confidence
Long-term
Relevance
7/8/2026
First Seen
Sources
Deep Dive into actions/checkout: The Core Foundation of GitHub Actions CI/CD
githubGitHub Trending7/3/2026
Related Claims
UnverifiedSHA-256 belongs to the SHA-2 family, was standardized by the U.S. NIST in 2001, and currently has no known practical collision attacks.67% similarUnverifiedSHA-1 (Secure Hash Algorithm 1) was designed by the U.S. National Security Agency and outputs a fixed 160-bit (40 hexadecimal characters) hash value for input data of arbitrary length.67% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/261248API
curl https://kongchang.com/api/v1/knowledge/claims/261248MCP
get_claim(id=261248)